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1 

*K#F q±<0*SRffi«lE/F q £<7>*fiRffii&E/ 
E/F Qjt©jftT5£*S*t***#©&HftY £<A 

fflftK£jS**Lfcft»k t|trlB*«Rft^E/F q±CD* 
,6G £ lcK^"t-i>ffiRffl^E/F q_h©j&R b 

ifcj&R r tMB**"7»-*"C**j& 

±s-G = ±m-Y±r-R over E/F q 

tlftFqiOftnWE/Fqt, RfflifclE/ 

tt*K&j83 Jtfcft»k fc TiufBISRl&i&E/F q±<0& 
.£G£K^ff^£;|iRffi^E/Fq±w£RO^&< t 
t-»Of-^t, «f!ES:#T , -^Mi:»1S«|x tSL^C 
k t Kflflf s t Sr-frtrSife-jr'- * 

ii&E/F q±<7).^R5.<y f Hlffei:#7 : '-^M(Od*)^^< 

AflMdi:, ffiE***<D<&H* Y fife 
ttES&s tmfiaffiRftiitE/FqJi<7)**Gi:0«^ 
t.4S*l«|s • Gb, mimkmtm2;m*Y t 

»»«^20«m-YJ: > ftTESg r £|tfEMR 
ffi^E/F q±C0*Ri:(Da^e>*'*»3<75^r • Rt 
©HJ03J|*5£«>*JH::J: DsefcSft.* MAS** 



2 

$i«§ (i = l, 2, 3, -, n) ©#45#Kon 
T, *E#Fq±Oflffli«E/Fqi:, i««RM 

E/Fq±oS*Gtmy^f AfflSt, ItrffilSR 

ft»E/F q±OjftT3£il**t4»*#fl5&BIJ«Yi 

«jfco**#fl>**K«-fc^«**Lfc#a»ki 

fB«Rtt^E/F q±0*jftG fc^<K#-t**»Rft!SLE 
/F q ±O.^R©'>^ < t i>~~ ffi<D7"-f MiBi# 
7*- *M xi t& 

ME:fc#7*-*M«*K##^&4&»m£:, mTlBtfiRffi 
»E/Fq±OjftRXCTi[ffi*# , 7'"-* , M«>^*^4< 
£ t*Ri:ffftl»Itr HrE****-*-?*^ ' 
20 R#{; < t i>-&<Dr-?RV ! &ms b^ ffiUisXT- . 

±s-G = ±m- (Yi +Y2 +- + Y n ) ± r • R o 
ver E/F q 

^i#§ (i=l, 2, 3, -, n) tfOjf^i&KO V> 

tfRfrF q±<7>*ftRffiHE/F q £ , 
E/Fq±0*j&Gfc**tr5'*"? l Afl|#4:, MIBrtR 
fflaiE/F q±Oj«T?36«$*L*»**©&H«iYi 

a»0*45#0#>*^«-Lr^***L*:#a»cki 

IBttRffilfcE/F q±<0**G t tC^-T^tlRffl^E 
40 /F q±0.fiR©'>5 < b i>— U<r>r-9 t> MtZX^ 

r-?Mbm%cv>m%,%<o&*iizttir2,w$$mxi b& 

a&k; i: s b*<Strm£r'-?i!km 

lWiajt#'f , -^MO*»c<S#i-4«E»mi:, lulBWRtt 
i&E/F q±»*RS.O f mrfB5:#7 : '-5'MOT *>4>&< 
1 t> * R JlSri, ifflE*£ f - 9 fab * jft 

R(7)^'5:< b i>-$H>(DT-?X.U ! l&%!.s b, ItJlBv^r 

tulBSiScs iWsBWRffi^E/F qlWMGtcl* 
so f,fc**lo:gs • Gfc, lttESEttmfc«^IB«Yi 
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3 

(i=l, 2, 3, — , n) 0»t«t*t)%&i2 <D 

am' (Yi +Y2 +-+Y n ) itreesskr tmm 

«Rtt«E/Fq±Ojft[RtO«*»C,!fl:4*3 03lr ■ 

^i#§ (i = l, 2, 3, n) Of«fCov> 

■C, tfRfcF q±^tgRft^E/F q iOtfRftigl 
E/Fq±©*jS[G -f-Aflt*i:. HfrfEtfiR 

a»o**#o#^»cWLr^*s*ifc45-a»ki tut 

ffifgRffiiglE/F q±«3*jSGfc^4!t1fi-*fl|Rft«lE 
/FqioMRi <o^fc< b i>—&<D7-?b, mfi 

icwr- 9Mbm&<om&%<o&A izn-rzw^mxi 

i#Sl&ki b l-fcft-r s bz-strm&r-?* 

mtt97-fM<Ofrl,zmf-r2>&%imb, H&fEffRffi 
i&E/F q±<7>&.£Ri SO^fE**^-^?)? 
ft< t %jftRi t«tfiFt-*#«P»ri b. tWrE**7»- 
Ri £>4?& < £ 'b-gBGD^-^&j/g&s 
fc, «nE->^xA««i:, *&HftYi i?5-x_hi\tzb 

litrfEg&s fcMlfiflRffiiglE/F Q±o*jSGtOSi» 
e>***l«!>:«s ■ Gt, MIBSftm£:#^nttYi 

(i=l, 2, 3, — , n) Offlt<Da^<b^S^2 <T> 
mm ■ (Yi +Y 2 +-+ Y n ) b, mfieSSfcr i tmf 
fEjSRffiiglE/F q _t<9#*.Ri i:coacof0^<b^-5§| 
3(Ofl (ri Ri + r2 R2 +•••+ m Rn ) b<Dffl(D 

om&ifc&TMb, *&m-rz>z.b*<wmb-rz,m.=t-m 

I«*a6] *m tit-ram?** * 

vtfctzm&r-fi'fim.mmb, mtm^m&T'- ? \z 

#KftFqJiOtiRffl|gE/Fq £ , i<7)*»Rffi||E/ 

Fq±Ogi±rGt£#tf->*xAi1i$g^ itreMRHMti 
E/Fq±O^C-C3e«*ii*»*4f«)&H*IYi:, -CO 
<&gg&Y=x - G&K&1-J: 5 KftJ*S*tfc**#«5» 

tf*K£j8S*lfca*k t«rtEitP3ft«lE/F q±0* 
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jftG fcK4K#i-**R|fcttE/F q±©jftR©^* < t 

&E/F q±60*RS.0 f H!TfeA#7 :, -^M60d *>^& < 
b fcjSRK«a?1-*SE»r fc, *IE*ife7'-^r*«^c 

io AfSt, 1MrlE*iB#0&BttY*»-§-x.e>iifei:SC, 

mssfts tmaB»ntt*E/Fqjio*ji![Gfco»* 

£>£*liSl?>*s • Gt, mffBS^mtlJIE^PI^Y t 
2 ©«m • Yfcx StTieSSfcr tfiffSffiR 
ME/Fq±(7)*Rt(?)i^t)i5»3©ar • Rt 

(i = l, 2, 3, -, n) Of^fCow 
T. #R#Fq_t©:!*Rfl)*E/F qfc, iOttRil 
E/Fq±©*&G 7" AflHRfc, ftfftftR 

ffii&E/F q±<Oj&-Cj£*$;ft.*S;&#<02fB3«Yi 
iO<2rHMYi=xi • G**fctJ: d Kffo£3*L 

IB»Rft«lE/F q±©afjSGi:K4Kiff^-*i»Rtt«lE 
/F q±<0jSRO^4 < £ & — %i>(D7"-9 flrffi:*:* 
■7'-^Mi:flH»0»45*fl5#*ti*i-4W*g|xi £# 

■J-«#8«r**, 

mte*7-?M<oz.i,ztf3ffz>&$c m b. mm^nm 

R<r>4?% < b i>— $KDT-?RU ! &ms b^ ffirfEv^f- 
mrieS^s tiHB«Rft*E/FqJioafejSG4:oa*' 

e>^*»ioas • Gb, mwakmt^nttYi 

(i = l, 2, 3, -, n) (Dmb<Dmfrb%2>%2<D 

mm- (yi +y 2 +•••+ y„ ) b.mu&$t.Tbmm 

«RffiltE/Fq±<7).^Rt<7)ffi^'b4i>^3<7)«r • 

<om&a:bmm%m&3:zmz,8i&3Z.b Lrm^xmz, 

50 ^*S-ff4^#SSr-^trii:^^mti--&«^^v^ 
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[ffif*£8] n**^«JK*fL4«a«)*i&*OlBIT 

(i=l, 2, 3, n) <0*45#Cov» 
T> tI#Fq±»»RffitE/Fqt, iWjfRffiigl 
E/F q±©*jSG tmv^fAjSft, TftlBfliR io 

sB^RfilifclE/F q±«33fcj£G fcfc«#1-4«|Rffli*E 

/F q -t<7?£-.6Ri CD4>ft < i i,— SBOt'-^ MIE 
£#7=-*- 9 M t t Jti" & x i 

tffffi*#^-*MW*UiK#+*»lfcmi:, lfrfBtttRffi 
S&E/F q JiO^Ri S.O f |frfS^:*T'-5'M<DT *>4> 
ft<i<i>.£Ri n fc, mr!B?^7'- 

^T*-5>^-,SRi W^ft < i SBOr'-^&U^f&s 

H&lBUf&s t«HBNinia«lE/F q±«>*jftG 
<bft&£l <7>«s • G£, t»IB*»mi:#&WftYi 

(i = l, 2, 3, n) ont<Dm^hfO>m2<r) 
«m • (Yi +Y2 +-+Y„ ) IMBSEScri fcflf 30 
fB«Rlft*lE/F q±«D£-,£Ri 4:©«0#n*<b***S 
3 CDS ( r i Ri + r2 R2 +•••+ r n Rn ) b<OM<0 

m% £ ft -9 t £ 3 > tf i - ? k n fr s £ ^ 

tEftFq±^H«E/Fqt, £0*tRffii^E/ 
Fq±©*AG mffB^Rffl^ 
E / F q ±0 tgi J f ^ f 0« Y t , £C9 
<&giJ^Y=x • G*»fci- i 7 KffcJS 3 
^gx t£fflv>T\ 

tt*K*JSS*ifca«:k hHtffB*SRffl^E/F qiiOg 
jSGi:»c4Kff-r4l»nfti»E/Fq±0/!!CR©il?*< t 
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ItBitf - ^ MO*Cttfft 4 *ftm i: , ltlIB«Rffi 
«LE/F d±<o.^RRu ! mBX*r~^u<r> n *>4>ft< 
t *> jS R fcfleff -T 4ltrt« lufE^^ 7»- T* 4 * 

Ro^ft < t & — g&tor'-^&r/sii&s frfBv^x 
twib&scs i:iinanpjft«iE/F qjio*jaGi:oa*» 

ibft^^lWSs • Gt. UIB^mtMIB^^Yt 
BSE / F q 1© * R t I7)f !5> f> ^ 4 « 3 «f r • Rt 

<£> fll^g tfc* £ ff ft -5 t £ n > tf - 9 IZ Hfl $ -£ 4 

fll ») ^TtgftfEii«#-e*-3 -c. 

mi&B (i = l, 2, 3, -, n) o*i&#fc:-3V» 

^TRBffF q±W*tRffl^E/F q iOttRft^ 
E/FqiWiAGt^tfy^fAffiSt, tulBffiR 
IIE/F qJifl5^C-CJg*S*L4*2fe#©&BB*IYi 

io<&pgiiYi=xi • amtz-t i 7 izitmzti 

IBtSRft^E/F qlOMGtCtSti^ME 
/Fq±OjSR«^4< tfc— a$07»-^4:, mffBi# 

L. 

lWIE»*«3lES:ff ft 3 

1trBS:#7'-^MO*K:«#i-4aESkmi:, HrlBt»Rffi 
SitE/F q±CO*RS.O f ttJfB5:«7'-^M(75d *,^ft < 

RO^ft< t ^-SB^y'-^S.t/^s ItrlBv'^r 

mflBS^s tmffB*«Rfli^E/F q±0«j«GtO|* 
btc&mi<Dm.s ■ Gfc, ttrfB^mt#<&BI^Yi 
(i=l, 2, 3, — , n) <DfPi:<0«^e>ft-5,^2^ 
m.m ■ (Yi + Y2 +-+ Y n ) frfBS85:r tltlB 
»nfl»E/Fq±©jfl[Ri:OS[*?)ft4*30ar • 

^dfe^ftd, i t*#m^1-4IBii«*o 

O * If ft d «ta t S: 3 V tf a - * K mi §• * -i. 
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mrf ■y- * * f&at-t- « Ma ix » 

S&i#B (i = l, 2, 3, -, n) <7)#£#i::ov> 

*R#Fq±<7)ftR[»igiE/F qt, :««P)li 
E/Fq±W*^Gt5r#tf->^xAlfffii:, TftfliiftR 
ffii&E/F q±©jftTje«$K4**#fl!)&WIftYi 
C©&W«Yi=xi • G J: 0 UftJftStL/; 

E#!Rrt$lE/F Q±0*jftGi:C«t#+4*|inilB*E 
/F q±<7)#.ii:Ri o^4< t * — aof- * t , mm 

fc#a&ki ii:^#1-£&&s .!: : ^:-£-tJ'^&7 : '-:S'£• 
£J&U 

«ria**«**tf ft a &gix, 

IHBS:»f-*MO*»c«flp-r4lE*mi:» TttrBftRffi 
• E/Fq±©#jSRi SU f Btrffii#T'-^M<0-5*,^ 

^T*4#jftRi £>4>ft< t i>~$><Vr-?RV ! 1&$Ls 20 

(i = i, 2, 3, — , n) omt <r>mfrh%z>m2 <D 

mm ■ (Yi +Y 2 +- + Y n ) ffiim&n tM 
fBftRffi&E/F q±<D&j£CRi £ <£>»coft]tf-> <b ft 
3 OS (ri Ri + r 2 R2 +•••+ r n R n ) t<Dffl<D 

fl£lfc*ft*H«*Sfclx£^M«5*;i: 
^fflBftH«***i&tfe3StS:t LTfflv»Tf*ttSS-ff4 30 

y"2=x"3+ax+b (fiLa, 

--t, y " 2 (Xy<D2*£^U x " 3l±x<03** 

[0 0 0 6] ftRffigflE/F q<7>5cl±5$ (1) 
(x, y) (-ft£ftRfti&±<O*t0¥.£) 
ftlffij£.SOi:#»t>j£.&o *KS*.OI±*Pl#F qW7CC0 
^7 (x, y) fcV>3Jga;iM±*STSfcv>a», H*± 
lx*£Ri£*£^1- 1 tfy h<0 7 9^?rffl«-tixtf Ii> 0 40 
£©ftRffi*±«jft©*^lx;lni*UHLTS*«dt-*-& 
i b iFfahixX^&o i tf>ira£KH LtURS* O Ix J£ 

fitTC I' ft i> a 

[0 0 0 7] «FlliE/Fq<OJ: !)ftU&K9§*2n]* 
O^^ftffxtBlx.ffKoblitz, "A Course in Number The 
ory and Cryptography" , Springer-Verlag (:<bl>o J£L 
T-Cli#^Bf<bftv»R«)^:5:*-c*SnffiiS±0^ ("Tft 
to*,, *R#F q^TcO^Tt L< »i£lR&*) £S 
U /Kfc^rixftRftF qa^tL< IX g 
ttf&o ftiJ, ^lftFqliq=p " t UILplXjg 50 
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* l%W<r>Wffl%m.W] 
[0 0 0 1] 

[0 0 0 2] 

O (4 X H »»» MB © ffl «tt K*-^ < t ttttttKM 
K&o*<*:£lx. -«»4;frR#Jh©*ttS*fUJB1-* 

t ft R dm ± winffi^ zmm-fz -5 o 

ft R ffiigLt OtnfeP K is it * Ktfcttft MS Ix* Rfr±. O 
HlsttSKfiitAlBltWaMa^mHftiMIMa^JI:^, 

[0 0 0 3] ffof, mC3r£tt*ii«LT7'<f 
***&HftBr**S;*flWti-*»-&\ ftRfiJi£-t?>St 
tkW»M« * ^-^t:I^Lfc->7r^ liflfeco Mfll * ^ 

* £ b a^mx-b <0 , i © £ £ 4*&3*«>ffllttC fc 

[0 0 0 4] tPl#Fq±OjfflftiSlE/Fql±, #R 
#F q Ofllftd* 2 L < IX 3 a^Oft^, ( 1 ) 4 1 

<D/N-5^-^a, b 4:*Rfl!FqTje*S*t4 0 ftRBS 
IE/Fqttf»it2 L< »±3 0»^»rfc3eit?rffiT 

$) h if £ i -e Jx^i^i- s o 

[0 0 0 5] 

b, x, yti^-RffF q«07C) 

(1) 

^ tlxIESifc) «05c*c>*»>, «itlf, »^Zp 
(O^fjp- 1 f -e<0iit«?il*) J ^20J£^:'»: 

gf (2 " t) a»*aas-c*4, 

[0 0 0 8] ffiRli±©f^ ^^A'***S;C5«*fl9 

ft^S^WRffi^JKOElGamal ^t»**>-5. 0 Znjj&X' 
14, LT«nUM»«:3e«i-**Rfl:F q, a, 

b, gfej^G, *,<SG«0fi[^z *fflv^ 0 {it, MGO 
ffi^CztlX, z • G = 0 over E/F q S-gl^-f S/h<0 
IE&8Sc£SH-o 

[0009] m&ftm.m<7>W!%mi*&mz ts.^\,zmx 

z*ffi<D&%.xX$>*)^ #*ftJ«*0&H*llxBLTOjft 
Y = x • G over E/F q 

X»7'-^M<O^IC«S#-t-&SScm (ifLlX-felCf-f 
v ^ )l>\£ -y h ^JfSSLfcJtT'- ^ M £BS-£»ft ^ ^ 

■tftf-f -y^Ji'**lxttTO#J§lK J: «9^*S#i«o * 
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1% ffiftz 4:Sv»fc*^z5MB©S«»^**Sl»k4: 

[0 0 10] R = k • G over E/F q 

fllRffi*LhOj£7'-**Z z (z-lJGTFOBfc 

[0011] r = f (R) 
£<bK, J£JlTtf>s **i6^ 0 
s = (m — x • r) /k (mod z) 
*2&f-*l± (R, s) <V<T-£lbZ>o m&Otf&lU 
m, R, s#&**»fc-t£4:**HEi-4::4:K:J:-3T 

t>fLZ> o 

[0 0 12] r = f (R) 
m • G = r • Y + s • R over E/F q 
ElGamal ^3!i:27*(ElGamal signature scheme) 

"T. ElGamal, "A public key cryptosystem and a sign 
ature scheme based on discrete logarithms" , IEEE T 
rans. IT, Vol.IT-31, No, 4, July 1985, pp. 469-472 

[ooi3] m±com?^f£:fr*K i o — tecom^t:* 

fc^tt 4 E KX* KWi" 4 (s igner) K J; « 

J: & R|— * * 1 4: T* 

fllLTi4f-?ik ****«>*a** , i*lni-f * 

i±> *£fft*©»S*^;t&*i4#*5P#*SftT# 
[0 0 14] 

[»WA»»ftLJ:^ U*L&#c,, ±12 L 

*o-<ElGamal t*KS:ffll' 1 fctO?H4:^t. * 

& o 

[0 0 15] 

Wl*j|ftt4fcftOfS] ±E«§ft*JiJ*i-4fc 

±<7>*SRffi^E/F q 4:, £©*fRffii&E/F q±?>^ 
j&G 4: 4:. mrf2«Rffii8lE/F q± 

x • G i 3 Kft«S*Lfc»**0»?Mix 4: * 
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WtSSSmi:, fft2«RlfiiS&E/F q±W.&R&tf 
lijf25:#7'-^MW : ?*»^-4< 4:"bj&Rfc<as?1-*iSSc 
rt, flrfB*£^-*t?*£j&R£>^*< 4: S&Of' 
-^S^fis^ «UB5';*7 1 AflM»4:, iKriB**#<0 
io ^KJ»Ya t -5-*.*>*l.rt:4:#K, ± s • G=±m • Y± r 

• R over E/F q ( + , -©«F*»±0f3e©*ftC J: 1 

[0 0 16] ^Wimv^fAli, jt» 

f - * m k it -t 4 m?-** r- * * ftjs-f & 7*- * 

20 j|RME/Fqt, iO«fRfti*E/Fq±0*jftG 

i:*-s-tf->^f-A«ffi:» fflre»radMiiE/Fq±0>ja 

■Cje**#t*»45#«>&HlftYi:, -«0<ZrM»Y=x • 
G**|fci-J: 5 fcffo* & fLfc**#©tt*« x i:*JBv» 
t, ffi*fc£jSS*ifca»Ck tfrf21«RffimE/F q± 
©MGtt:«#t5«RME/F q±©j&R©4>* 
< 4: i>-$f><DT-? mttW7*-?Mkm&mx k 

*#a***, Mi2*«^ac^B(±> «rf2**r'-^M 

©*K<fcff1-*SESfemi:, DtTlBMinftaiE/F q±C9.S 
30 R^.iy f Htff2X*7 , -^M«0 : 7 *>'pta < kkM.Rlz&&-f 
41Sr 4u ttlf2^£7*-*T&£.6R<04>&< t fe- 
S&Ot'-^&O^&s 4:, ilSi/^fAffiSi, Wffi^f 

fffRffiiSlE/F q±W*.6G 4:<0«*e>4r** 1 <OS s 

• Gk, lWIE*»Cini:lirlE&H«Yi:<oa*C>4:4»2 
OSm- Yt, «rf2»S:r t|Jl2^Rffl^E/F q±<7) 
&.Rk<wmfrbt>:Z>ttS3<D-g.T ■ R 4: <D®<7>ift%.<DmM 
K x *) &m § ft* l± £ t ^ffi^ M# 
******* i: L"Cfflv»r**tt**1T4-5#S** 

40 tr 0 

[0 0 17] *%HJof2§i^(i. ^♦t'-^M 

»:»i"4« : f : *i&7»-^*flEJSi-**&a4:, ftjSSfLfe 

v if i - 9 -tfWtfrW. *) nTI6*f2^«#-eab o T, 
mff2m : f-^7--^*^1--J.*0 i a«±> ffl#Fq±» 
*IP]«|E/Fqi, £<O^Rffl^E/F q±^*.ii:G 
k*trtr s sX7-±Hmb* mIf2fflRffi^E/F q±<D,fi 
■Cje«**t4*iS#0&||«Y4:, -0<&M«Y=x - 
so G J: d Kf*fiK$*Lfc**#«>»*«x 4:*fliv» 
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■C, «*K£j«3*tfca*k£lWE»nBMilE/Fq± 

< ti>—&<07 , -9 mmxmr-j'Mkmmmx t 

«f-^S^tisi, «fE*>^-f A««t, HtS*« 
#«)&H*Y:4 f #;*.e>*Lfci:SK, fflfESSJ: s k HcffBfS io 
ntt*E/Fq±oatjSCGi:Oa*»?>4:4l|!HOS8 • 

Gt* mu&$cmkWim$;fflmY k(Dm&t>%z>m2 <n 

«m ■ Yt, WE*»r fcl»E»n««E/F q±OjSC 
Rt©a*f>44*30jr • R k <Dffi<Oftfcff>fa]g.\z 
J: 0 * ft* M#5£2 fc fi £ <7>|?8#5$ *flB&Htt3; 

[0 0 18] 

£o ^ 1 o«tBfrjc^*^S2fe*S:»±. fiSP3ffi>SJt©Ei 

Gamal »£#**«»l,fc*?*&;fr*TNfe !K 20 

*»RE6H±WElGamal Sfc^i *;fetfcSt 

tS#ftfflLf;s#s=m- x+r • k (mod z) t v» 

[ooi9] a*, r • fcttaafftx^aak^aro-cfe 

Hit jSRO*Ctt* S**fl|jSJBl*(.C, j&R ti»7'- 
[0 0 2 0] iOi d Kt§PJffli&±<9ElGamal 
— Mix S:fSI#L4v»S-g'tC**7'-^ R, s * 40 

[0 0 2 1] ^lC^2<7)mB&«rgi^-rao ^2©Mf 
U **©a»ki:tt#Lfc»njMtl:OjSRS:t«n: 

*#a*g#G>fl£jftLfcaifck km&mxfrb&ft-mz, s 
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[0 0 2 2] «fl*6s©S0fciJV»Ttt, **LJEJlUrO 

»* # J: * K # S © * 3 * * «, 

£ 7 LT«»0**#0«.a»= i 9 f - * R , 

[0 0 2 3] »*«k*C*»t4«*S:li» 1 

»t*&*:£?>2rK®Y ©<&^ 

■C*>M*L4v»»#Ktt, tt***8tfci-R, s(4?#<b 

[0 0 2 4] ^i:«3 0tt»i:|fflti. ^3<0«EB&T* 

*i.a*k*ffo«U ioa»kic«^Lfc«R««l±0 
»* s K S x t £ R K5R|fl| L fca» k 

mzmizmzo s fcwm#K, i, 

fcjS***^-*©— «fcLTiIftlLTV»< 0 -?LT 
ft^O^^-WjaStCi t)#MiS7'-^ s , Ri , R 
2 , -, Rn tf*ffcj£$*i<&„ 
[0 0 2 5] i»»*4ltafc3St»4IIS 1 ©IMfrfcil 

®Yi <D#PHfi§Jfex, $t>^*R<^]g«-1i>4-0^# 

[0 0 2 6] J0LT»=, Hffi*#IHLT±EL 

?i:> *v^fAt4-t>^ l o 4:*lffl*fcJ*s51-4ttlfc 
<*>JU (entities) 11. 12. 13 (Ui , U2 . — , U 
i ) *>?>)Sili*.7 1* 7-* 1 4 ICi Ofilj&Sil&o 
-fe>* 1 0(4<2rg{?1f$6i Lt, JtPJffittE/F q«3;<? 
j«-^*^JSLr^H-r*o ifc, «P3ME/Fq± 

[0027] s&k* K3Sf t^^h^<&p|-ra 0 Z\tl 

ICML, -E-cD^-f ->*i^. Mfffit LT 1 6 Obit 
@5eS<OS»*ffi^i-a 0 *^«±. SHA^MD5, 
R I PE-MD^ifT**4o Hft f t h t4*aT 

[0 0 2 8] #«Ui 14 z - l«T«litf*4M 
x; :Oxi *S8fttt*. ?t>C> ^^a- 

KftYi Z&j£iz£ <0j£tb& o 
Y i = x i • G over E/Fq 

jgUi i±m-Z:WimYi 1 oicgiK 1 0 

»4-2rH»'J^. Y<om\3\ Oi'J7t:Yi *2Mbi-4 0 <Zr 
BaaU-^ hO##^x{4-b>^ 1 O^^H^T-Ci, 1^ 

i <0 I Dlf^ (IKSUfllff) £ I i 

[0 0 2 9] 0 2AI4. ^Ui i^tf-^Mi:Wt* 
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<^Ui <D^M> 

1 :SL£§:k (Kk<z-i) £5gft& 0 (x-r^^ 
10 1) 

2 : R = k • G over E/F q £ft^1~£o — 7 
7^1 0 2) 

3 : r = f (R) SrWW-r&o - Uf^l03) 

4 : m=h (M) «rfMt1-& 0 1X77^104) 

5 : m, r fc®9Sttx i s = x i - m + k • r mod 

[0 0 3 0] ••• Uf7yi05) 

[0 0 3 1 ] ro^ffc/S^RgKjstt&X'r ? y 1 0 

y^>i/**ftJSOK****i:4«r^im[L, (k, R, 
r) *ftofriau*<Cti«-C?-6o ^(DXdlZ-f 
Sk, f^JSS^Oftitt^f 7^104, 105 

[0 0 3 2] JfcKEI2 B«r#BRL4r**fe. #7*-f V 9 

1 : h*5>»Ui <0<&g3@Yi ^^^ffii-o 
[0 0 3 3] •» Uf7^106) 

2 : r = f (R) *ff#1"&o - UT7-/107) 

3 : m= h (M) *#W1-& 0 - UT7-/108) 

4 : r. s, m, Yi W$&XDM*mti1r - ^ *5tB * 

(s/r) • G- (m/r) • 
(s/m) • G- (r/m) • 
(m/s) ■ Yi + (r/s) 

&£ffl<> L< fi#aOJg<9»:gi: s, m, r^FqUiS 

[0 0 3 8] J fc. «4S;Hi5ftt^ s • G, m • Yi , 
r • R<D3T£<Dfr%ri$Ex.2>Zb (i" + £ - K 
L*:*K -tOifi. ^fr69HJi± s • G = ±m • Yi ± r 
• R = 0 over E/F qtU<, + . -Ol?fiifllT 

;£2;*x£) <>»*^isE«e*ci5tt*^'ry yi 0 50 
s, xi • m, k - r (Om^r^^h^t\zmm-t^tz 
ft. »**^*Jt*3*0«Hg-S:«x.fc»*^S:tt*jr 
tt fc^SIJfcJgffiO*:* £ S £ i: fc 3 *Lfc 

[0 0 3 9] *«WO***S:^i3^T, f 

(R) Oftfc^Kf (R, M) ^fflv^Uw 0 f 
(R, M) *±»£#3&*^>* r AfcSHeLfc, »n**Lt 
<0j& R co 7*- * i: £#7"- * MOW* H#c# L fc^ v y 
afiiUv^o AffWKfiR £M<h ^Iglt^7 
R(7)f-^^ii:Lti#^>7ya (Keye 
d hash) ifc**Jffl1-&&ir-C*&o 
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[0 0 3 4] -v (^77^109) 
s • G = m • Y i + r • R over E/F q 
£^H##*:S:1-*»<&K«±. (R, s) t2^Ui 05: 

o 

[0 0 3 5] Xf7yi0H^10 5<D^MK± *} & 
J&Ztitz (R, s) WXT-vfl 0 9 0«fe***»JB1- 
* i t fi W & o * M^x. h fitz 

0 9 01*4***^ (R, s) Ojfi«:#ft&;i fcl±t» 

*^i:#£^tt^o «x.tf. **J^R*^ft* b s • G 
= const over E/Fq^^s £*ft & ^ tlZ^ Y) , i 
Wi*lWt»KH^<fiS:fc&^ 0 s£5fcK5£ft& 
r * R= const over E/F q 4 & R *r*ft & £ £: K 

[0036] 4*. **»»a<of^ v * frmttm-z 

[0037] £ 1\ ^777^109 OtfeafaSli. 
s-G-m*Yi-r*R = 0 over E/F q, 
— s-G+m-Yi+r-R = 0 over E/F q 
4 J? * * c b b mmx* Jbhc\b\$ &CJ3 1 1 & 

Yi =R over E/F q, - (2) 
R = Yi over E/F q, 
• R = G over E/F q 

[0 0 4 0] ^^MMT'fi^T-^yi 0 3 tXy-y-fl 
0 7^r-f (R, M) K^H£tL£o -^tc(±r<7)i 

t BE S tl -6 ft Hft^tt#W±-T & o 
[0 0 4 1] »**#**ftJSlf 

fc«m ■ Yi t***0»**xi mtmistzsKty) 
*jftGSrJra*"*--6BI»*SE^fcS^:fc«s -G£7)3o^f 

[0 0 4 2] ^Od^S: (2) 
*ft:M4¥JiS^^i-o ^Ui ^#T ? -^M^^i-^,x 

Xx^/ yi 0 1 ^gH)gO<!oa»k *£jS1-£o 



(9) 



4#B8¥ 1 0- 1 5 3 9 5 6 



15 

[0 0 4 3] *K±SBU/i«aE^j«*SE»Lfc7--f 

[0 04 4] - Uf 5-yilOl) 

2 : m=h (M) £ff#-f£o - (.XTvfl 1 0 2) 

3 : 1/r (mo d Z) £It»1-£ 0 — &?v~f\ 1 

0 3) 

4 :^*«>jSR*tfiti-*o - Uf'?/1 10 4) 
R= (s/r) -G-(m/r) • Yi over E/Fq 

5 :£Rfc*45f»-*©r#**OHfR*8lfc-i-;ri:* 

[0 0 4 5] - (Xf-;yi 10 5) 
r = f (R) 

iOH#* f JKj£-*-*»-6-KI4, (r, s) fiAUi Ojt 

%> o 

[0 0 4 6] HI l:/7Lfcf^y?^f*S:#i 

U H5A. 5 BJi#HO«ka#JH*^i"o 
[0 0 4 7] gUi, U2 , -U n COnJB** 

OffcffitiEU AORn OfmR^v Ki:. i4BOs n 
Of^^^ > Kc0 2E]O®IlIS^^^^;^o EI 5 A (4 R 

(1) Rn <0ffcj«9*> K 

<^Ui <^JH> ( i = 1 , 2, n) 

1 :SL$Cki (Kki <z-l) SrftJS-tSo - U 
f^301) 

2 :«U(i-i) *&S«Lfc««R(i-i) tSLSfcki 

[0 0 4 8] Ri =R(i-i) + ki • G over E/F q 
- Uf7^3 0 2) 

3 :««Ri , itf-^M^gU(ui) 

Z>o — Uf^3 0 3) 

Jtt±<0&3*JBUi *»<bJm#fc«Un STfMTU Rn 
fci3. HUi 14. Ro =0 (&R»,£) i: 
Lt^t^3 0 2<D#LS£fT^o 
[0 0 4 9] Sfc. m\Jn liftJftLfc««Rn r = 
f (Rn ) ^i: »9 r £*a6. .T*i£JSUi s 

n ^M7-)> KK#& 0 

(2) sn <OftJ5K7-> > K 

<^Ui (D^m> ( i = 1 , 2, n) 

1 :HUi , U 2 , U(i-i) O&HttYi , Y 2 , 

Y(m) *3tBB«y* h * tH-To - 
^3 0 4) 
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2 :JSU(i-i) ^??Rn Of^/S^ ^7 > KT-gfgL^R 
(i-i) :<7)7^'/raU(i-i) Lfcr, 
s(i-i) ^OHftSrjBfcLTv^riiSraE-r^o *** 

(^77^3 0 5) 
m=h (M) *ffjf, 

s i-i • G = m • (Yi + Y2 +••• + Yi-i ) 4- r • R 
i-l over E/Fq 

3 : TsTV-fZ 0 5 0B««:»JELt^j;V^|:ii, 
10 * 0 ■■• Uf 7^3 0 6) 

i *fflv^r^:S:<o s i^tf^i-^o *•• (xf7^30 

7) 

si = s i-i + x i *m+ki • r mod z 
5 : si , r £^Ui + i IcSSo - (^77^3 0 8) 
JflULOj&aSrSUl tf*e>JR#KHUn *"C£SfrU s n 
SrftJR-f&o JSUi 14, so = 0tLT^f7y 

3 0 KDf&m&nio 

[0 0 5 0] JBLtK* "}ft*Sftfc (R n , s n ) 
20 Ui frtUn J: **#^-*Mtctt^ 

&o lUn ttftj3tLfc**fl|«l (Rn , Sn ) *#S£ 

lotT^TOSUi , U2 , Un-i i:JS^o 
[0 0 5 1 ] 4*3. JilB^JHOd^^xy ^3 0 4,3 

0 5, 3 0 6 liffldfr** s i-i Ofc**5l1rr 

*«*Lfc*£\ (Rn , Sn ) #fMSS*Lrt: 

j«#o^je* -c s & z* tt**B tc^m-r -5 fc* k (4* x ^ 

^3 0 4, 305, 306 Offi#»£Otfelt***»"C* 

30 & c 

[0 0 5 2] 116 (4[H5 A, 5 B <D^M\~ X ffciS £ ft 

fi^o f«Mt:fiRn , Sn , MiJJtfJS*) I D«* 
II, I 2 , In **1&R-C** 0 

[0 0 5 3] 1 : «Ui , U 2 , U n O^rgl^Y 

1 , Y 2 , - t Y n Sr&BB'J^ h*»&«0Wi-o - 

(^77^4 0 1 ) 

2 : R n , sn , M#*OH«tifctiit«Bt 

4o — ^77/4 0 2) 
40 m =h (M) itm. 
r = f (R n ) £fffi\ 

Sn * G = m • (Yi +Y2 Y n ) + r • Rn ov 

er E/Fq 

iOHft^JftSti-ft*^^*!. (R n , Sn)tiJES^ 

[0 0 5 4] 4:i5. Jei±^*Lfc*M*f|p**«XW p 
*K»***¥IR"C r * f (Rn) <Dtt£>*)lZr= f 

(R n > m) Ksasu s?>t#a****¥«u*»t 

^^7-7^4 0 2 t:i3V>tr=f (Rn . M) tC^M-T 
50 ^CUtHo 
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[0 0 5 5] m3lZ7FLtzm%&ttmi:Z<D0' 

M*^jBffli-4*«tRWi-ao ^Ui urscmr-* 

5 A, 5B^KiHi:-C*i&i«, - -T^i. ^Un 
Rn WLr = f (Rn ) *tt*U r^ttJiztE^ 

n «>&*7 * > K-TBUn ^ffiifT^ r tt z ilEVMC* 

[0 0 5 6] ^:uOfV y^;H*w»St¥)BS:Rfl 

1 :»Ul , U2 , Un OftmmYl , Y 2 , Yn 

S"2rB8»U * b^^K*9ffi-To - Uf-;y 1 2 0 1) 

2 : m=h (M) iff*— Ur7^1 2 0 2) 

3 I 1/r (mo d Z) ^Ifff-f^o - Uf 77^1 
2 0 3) 

4 : *5W>jftR n £ftJ?-f &o •» Uf7yi 2 0 4) 
Rn = (sn-/r) * G- (m/r) * (Yi +Y2 + 
-+Y n ) over E/F q 

5 :jftR n t t*f - ^ © r 4»**OH«S:*fct i t 
*fllB"f &o — Uf7-/1 2 0 5) 

r = f (Rn ) 

i^H«*»J*fili-**-&Utt, (r, so) t*IE^&^ 
* *fe h 4 O fc #1 jg £ 0 

[0 0 5 7] tfcl/Z^ |H 2 A> 2Bt:/?L/:f -fv^JH 
* fcSUB Lfc * 3 HttJBBO«^*«^ttS: 

I£§§-f&c *3*«0g»»w^»t&1f«^)iilE*L«:BI8tw^ 
■To ir^l±«JfcO#*ftJ«»H-Cfl|*|l*iaS^:*« 
*tT#»**7*- &o »Ui , U2 f U 
n On *ft«-T& tcok-r^o H9i±^U 

<^Ui <03MI> ( i = 1 , 2, ■», n) 

1 :SUi , U2 , Ui-i O^gSftYi , Y2 , 

Yi-i *&H«y* h Iti-To - Ufyr 

6 0 1) 

2 :«Ui-i *<b£fILjfcRi , R2 , Ri-i , s 
i-i , M^ii^l^Ltv^^t^SEt^o - 

Uf7^6 0 2) 
m=h (M) *ff-#, 

r j = f (Rj ) ( j = 1, 2, i - 1) SrttJt. 

s i-i - G=m • (Yi +■•• + Yi-i ) + n • Ri + 
r2 * R2 H — r i-i • Ri-i over E/F q 

3 : ^-f ? 7 6 0 2 ^)H#S:*JELTv»4rv^t:H, 

&o — Ur^6 0 3) 

4 : f5L^fc k i (Kki <z-l) *ftJ»i-*o - U 
77^6 0 4) 
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5 :a»ki *ib*S:<0Ri Sr^ja+So - (^f-;y 

6 0 5) 

Ri = k i • G over E/F q 

6 :»Um *fc$«Lfc*«si-i ^SLSScki , 

6 0 6) 

r i = f (Ri ) «rtf-jt, 

si = s i-i + x i • m + k i - ri mod z 

7 :f-^si , Ri , R2 , Ri , **7*-^M 
10 £«U i+ i i:»|t4o 

[0 0 5 8] - Uf 7^6 0 7) 

Ztlfzsn , Rl , R2 , Rn **S U 1 *?>Un 

1 ii. R 0 =0 «teR»jft0 , s o =0tLTXT7y 
6 0 5, 6 0 6 <0«La*ffV^ Xf7/601 6 0 

[0 0 5 9] H9^#«KJ:9f&«S^fc#***«>fc 

20 1 :iUl , U2 , Un <7>2rK®Yl , Y 2 , Y n 

h*fe9t>J W-To - (^77^701) 

2 : s n , Ri , R2 , Rn , M^-k<Dm&*mtz 

[0 0 6 0] Uf77 P 7 0 2) 
m=h (M) SrtHlC. 

r j = f (Rj ) ( j = 1, 2, *•*, i - 1) £StJt. 
sn * G=m • (Yi +- + Y n ) + r i • Ri + r2 
• R2 +-r n • Rn over E/Fq 
znm&tfJSL&'t ZWfkfcl*. (Sn, Rl , R2 , 
30 ... f R n ) &jEM*0>Mm% l 'T?$>2>i><obmfc-?Z>o 
[0 0 6 1 ] &ib\ H9, H10 i:SL/:#l*«fe 
fi. El 5 A. 5B, BI6cO#S#ifefeHtt:-<T. 9 

[0062] ttz. m<omwmntmwz^n*^ 

mx-i> r = f (Ri ) Oftt?^ r = f (Ri , M) «: 
*lJfflLT Jzv^o A^KJt'ii. ^Ui ^>#***ft*¥- 
Ii:j3tt^Xf7 7 P 6 0 2 t:trj = f (Rj , M) 
( j = 1 , 2 , i - 1 ) Srtf* Xf7"/606 
40 ^T, ri = f (Ri , M) i "5 *--t*t-F*L 

[0 0 6 3] ^***<0«aE*JH"Ctt> ^T77 P 702 
»:trj = f (Rj , M) (j = l f 2, i -1) 

3 fcsesi-*o ami, *ii»r^t 

[0 0 6 4] ?S»^9 0 1 tt£«fiO«jr**fTl-S» 

50 £gB^T-$>£ 0 aSc^^e'; 9 0 3l±&»S&£»9 0 
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•G over E/Fq(7)l^ r =f (R) ^fflcO^T * 
»a-t&*B»"C*&o a»»*»9 0 2, ft£8 9 0 1 
tt**ftflil*-«*«FJtt^^«>*f»L. SLft (k, R, 

r ) o^rttftu aao^e'J 9 0 3 a 0 « 

iSft^^'J 9 0 4 tiS^ffiSttSrftitti-^^^eu-e* 

ho t<om^mu9 05, ^^ey 9 o 6, Am^a$9 
[0065] *%Mjmtom*tt<o$mmi 

<^Ui £>#JK> 

1 :a»k (Kk<z-1) £;£*!>£o - (Ay-yf 
10 0 1) 

2 : R = k * G over E/F q £ft*1"&o — (^x y 
71 0 0 2) 

3 : r = f (R) £ft-J|-r£o - (^77^1 0 0 3) 

4 : m=h (M, R) ZWrM-fZo 0 0 
4) 

5 : m, r t f&3Ni xi ^f)S = xi * m + k - r mod 

[0-0 6 6] - Ut^1 0 0 5) 
J»±KJ: ijffoffiS^fcRi s;WBUi ^S:#T'-^Mtz 

[0 0 6 7] *7*>f y^;W*«0«*^JWttJSlToat} 

1 : <kmmv * b**fe»Ui <D2r^SYi ^^*5ffii-o 

[0 0 6 8] 

- Uf7n oo6) 

2 : r = f (R) imn-f&o — Uf 7^1 0 0 7) 

3 : m=h (M, R) iW&rrho - Uf^lOO 
8) 

4 : r, s, m, Yi #**©R«t»fctu tt«B 

-r^o - Uf^i 009) 

s*G=m-Yi+r*R over E/Fq 

(R, s ) ti^Ui 

[0 0 6 9] i<D**rUm<OW-»KiJV>T, :£#-7*- 
*Mtf><fc-Cft < 5 >fAlz£.J&.21ltz&R<07 r -9 $rft 

U ft ±i-2>i>V>£^jLhtlZ>o ft ±5, m= h 
(M, r) t LT & Ivi„ 

[0070] z.<D$tj&jj&\,ztutz>2mm&&m%, cm 

5 A. 5 833.1:^0 6) <0^mtemmzm=h (M, 

R) ^B#«x.fUf^v» 0 liC8M#m^ (0 9 £ J: If 
ill 0) O^M-CIl, f4S*CJ:i)mi = h (M, R 
l ) , m2 =h (M, R2 ) , — , m n = h (M, R 
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„ ) fc***ma*£«3il*«>r, &*5$fc si • G = 
mi • Yi +-- + m n • Y n + ri • Ri +-+ r n • 

Rn ttI?W 0 

[0 0 7 1] itz, 01 2A, 1 2 BKjjrt «fc 7 ft#Jffi 
MMWAzXtHi. ttRttflLhOElGamal *£*JBBU 
io [0 0 7 2] ft*, ±BLfc#3£lte§yKKii»t*, mT- 

[0 0 7 3] 

20 [0ffitf>ffi#ftS£9n 

[mi] ♦f&wonsmift^si^flSiw^ife^^T-A 

© *#fl£j£ * TFtBl T* & * o 

[B 2] (a) M\ *»B0J*1 Ifet&gflgca&m?-* 
4i#ttKi3V»-C, #*f^J|fi#JilS'^i-HT?*»), (b) 

[0 3] *»«©*l|llBBIBfcf&4m?-**#ffi*S 
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